2018

In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service o

An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Andro

An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1,

In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated

In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is t

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the

An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Vers

An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0,

An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1,

An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.

An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: A

In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException lat

A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map. Product: Andro

In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error. This could lead to a remote den

In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks.

In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead

A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1

In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the

In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice c

In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This could

A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. Pr

A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product:

A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters. Product: Android. V

In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This coul

In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condi

In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds wr

In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a free

In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad he

In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a

In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which

An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1,

An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmen

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file

An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 throug

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote

Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers

node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might

The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execu

cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication,

NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elev

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php (current_slider_id

The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php (trid parameter).

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id

diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.